HTTP: Phorum Read Access

This signature detects access to the vulnerable read.php3 script installed with Phorum. Because the script does not validate input, attackers can execute arbitrary SQL statements to modify the database contents, insert new entries, create and drop tables, etc.

Extended Description

By sending a specially-crafted URL request, an attacker could execute arbitrary SQL commands on the server.

References

CVE: CVE-2000-1233

URL: http://www.securiteam.com/exploits/3K5QDS0QAS.html http://www.cgisecurity.com/archive/php/phorum.shtml

Short Name

HTTP:PHP:PHORUM:READ-ACCESS

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Phorum Read Access

Extended Description

References

Found a potential security threat?